X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:from:message-id:date
	:mime-version:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=NIaSBI4cX2nVosjS
	LCgQsugH53+Zjni64d8Y3Ij7XFKrwcw5nY2k5qLGEy0UYQIEumtfrCWzikVkLmzO
	NHiy6jg7T/O6nKhaO/CEqn2lDTMJXz63CX7xm3sYLCrm8Hb6Y4TPEDxjBNI43c92
	79rTTrsigdJUK47Uo3TfzODWut8=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:from:message-id:date
	:mime-version:in-reply-to:content-type
	:content-transfer-encoding; s=default; bh=/ckUwu6oml/2QnNEsSqiQr
	JPUbU=; b=EhysNTfCn+4S2EU6GgNk1ujNK19Q4M3UMg7vq13ZVJtsE3+2oWaiR2
	Qso8oohKzgU89hAeRgpYAd05d4ipp06SOTIeM/bsP80Wb6PW7GEaUlptjKYOR7ik
	BgY3kes2amx0Ux86xsC0D8FhLd201a9L3fDUpLdZV4vMfJSlt7300=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-0.5 required=5.0 tests=AWL,BAYES_50,SPF_HELO_PASS,SPF_PASS,T_RP_MATCHES_RCVD autolearn=ham version=3.3.2
X-HELO: limerock03.mail.cornell.edu
X-CornellRouted: This message has been Routed already.
Subject: Re: Group Permissions on root folders problem (Windows 10 TP build 10061)
To: cygwin AT cygwin DOT com
References: <CAMH9mcFEL3mao+m-DEYM84kC1HOPeSBpZXD+mDf0USobF9oY7g AT mail DOT gmail DOT com> <CAMH9mcFOKjvjiFvvk1ju0ZxBDK28MaktdnYwj5_CjvbgnpVO4A AT mail DOT gmail DOT com> <20150616155843 DOT GE31537 AT calimero DOT vinschen DOT de> <DJzl1r0012qVqVd01Jzm3c> <55F1A69D DOT 9050201 AT cox DOT net>
From: Ken Brown <kbrown AT cornell DOT edu>
Message-ID: <55F1AADD.1030908@cornell.edu>
Date: Thu, 10 Sep 2015 12:07:57 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0
MIME-Version: 1.0
In-Reply-To: <55F1A69D.9050201@cox.net>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes

On 9/10/2015 11:49 AM, David A Cobb wrote:
> On a Windows-10 host: when I use Cygwin *chown***or *chmod *to make
> permission changes, the next time I access the folder-tree from Windows
> Explorer Security tab, it complains that the Access Control List is
> incorrectly ordered and that will cause undesirable results; happy to
> say, it gives me the chance to re-order the ACL.  The usual undesirable
> result is that an app can create a folder /New/ within /T/ but cannot
> create anything within /T/////New/.
>
> Hypothesis: we are indirectly(?) modifying the ACL but are not observing
> whatever Windows expects for ordering.  I know that Windows enforces
> "*deny*" rules before any "*allow*" rules; I do not know what other
> ordering it observes.  I do know that Windows doesn't really consider
> the "group" property the same way POSIX does, FWIW.

This is explained in the Cygwin User's Guide:

   https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-files

Ken

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple